CVE-2018-8041

CVE-2018-8041: vulnerability in Apache Camel

Published · Updated

Follow this CVE+ Monitor Apache Camel+ Monitor org.apache.camel:camel-mail

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 9.6%
Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal.
Affected products
Apache Software Foundation · Apache Camel
Related CVEs — Apache Camel

In the same product, most dangerous first.

CVE-2025-27636MEDIUMApache Camel: Camel Message Header Injection via Improper FilteringEPSS 97.1%CVE-2025-29891MEDIUMApache Camel: Camel Message Header Injection through request parametersEPSS 76.1%CVE-2026-47323CRITICALApache Camel: Camel-CXF Message Header Injection via Missing Inbound FilteringEPSS 19.6%CVE-2016-8749—CVE-2016-8749EPSS 10.6%CVE-2026-33453CRITICALApache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code ExecutionEPSS 9.2%CVE-2017-12634—CVE-2017-12634EPSS 7.2%